Original Reddit discussion: https://www.reddit.com/r/linux/comments/1t6lgub/dirty_frag_a_new_copyfail_like_vulnerability_has/
Just tried it. It’s impressive.
where did you… where did you try it?
also - those local roots is - is why I think people using shared hosting are crazy
where did you… where did you try it?
Clone the repo, build the program as per the README.md, run, get root.
I tried it on a x86 / amd64 test machine I have here for that sort of thing. It only works on that platform. My main machine is arm64 for exactly that reason.
Out of curiosity, would you mind sharing what your main machine is and your general use case? For years I wanted something like a Raspberry Pi to be practical, but they struggled way too hard just playing videos from websites (I stopped buying them at Pi 4)
I use a MNT Reform with the RK3588 module and 32G of RAM. It’s for general browsing, working remotely, light CAD, light video editing and retro-gaming.
Performance-wise, it’s equivalent to a bad laptop from 6 years ago. But I’m not a demanding user. It’s fine for what I do, and it has other advantages I paid the huge premium for - one of which is the ability to upgrade the CPU module, and there’s a new one in the works from MNT.
I’m sort of considering splurging on a System76 Thelio Astra, but I haven’t opened my wallet yet - and probably won’t - because it’s an American company and I refuse to buy American whenever possible. So I’m still looking at equivalent machines from Europe or Asia. But I’m not looking very hard because computers don’t interest me much anymore.
So it doesn’t work on arm64?
I suppose it should work if you compiled it for arm64. But the demonstration exploit is x86 only, and has inline x86 opcodes in the source. So no, that particular demo executable won’t work on arm64.
More generally, what I meant was that I prefer running less common OS on less common architectures, so I’m less likely to be a target of malware. People who write malware usually aim at the biggest and easiest targets to maximize their return, and that’s x86 Windows. By running arm64 Linux, I’m not immediately in the crosshairs.
